1
Cybersecurity in a Digital Transformation World
Session 274, Feb. 14, 2019
KEVIN CHAREST
Divisional Senior Vice President and Chief Information Security Officer
2
Kevin Charest, PhD
Has no real or apparent conflicts of interest to report.
Conflict of Interest
3
• Introduction and Background
• Understanding the Digital Transformation
• Evolving Threat Environment at Digital Speed
• Cybersecurity at Digital Speed
• Cybersecurity at the New Edge
• Cybersecurity When No One Can Be Trusted
• Cybersecurity Team Culture
• Closing
Agenda
4
• Identify the digital threat environment and techniques for
addressing new threat vectors
• Recognize processes for operating under increased
standardization and automation
• Create and execute on strategies to control the flow of data in
your organization
• Develop an appropriate workplace culture for employees to
experiment
Learning Objectives
5
80+ Years of Success and Tradition
#6on Diversity MBA’s 50 Out Front for
Diversity Leadership Best Places to Work
for Women & Diverse Managers
Operating Blue
Cross and Blue
Shield plans in
FIVE states: IL,
MT, NM, OK, TX
Our Purpose
To do everything in our power to stand with
our members in sickness and in health
®
208.3 million
claims processed
annually
1936
year founded
LARGEST customer-
owned health insurer in
the U.S. and 4
th
largest
overall
+$1billion
in IT spend
Over
21,000
employees
15 million
members
2,100
IT employees
6
HCSC Cybersecurity Program
• Cybersecurity must move at the speed of the business
• Digital transformation is forcing evolution in cybersecurity programs
and HCSC is at the forefront
• HCSC has a fully integrated cybersecurity program that enables
and protects business innovation
7
Understanding the Digital Transformation
Evolving Threat Environment
at Digital Speed
Cybersecurity at Digital Speed
Cybersecurity at the New Edge
Cybersecurity When No One
Can Be Trusted
Cybersecurity Team Culture
8
9
11
Evolving Threat Environment
Hackers breach HealthCare.gov
system, get data on 75,000
12
13
14
Cybersecurity at Digital Speed:
Key Considerations
BUILD MICROSERVICES AND APIs
CREATE A SAFE AREA
FOR EMPLOYEES TO EXPERIMENT
Standardization
Disciplined
processes
AUTOMATION
INCREASED
SPEED
15
Cybersecurity at Digital Speed:
Hackathons
16
Cybersecurity at Digital Speed
SECURITY AND PERFORMANCE REVIEWS
ADDING NEW CODE
18
19
Cybersecurity at the New Edge:
Key Considerations
Data is now
everywhere
• SaaS applications
• BYOD
• Unowned and
uncontrolled
• Cloud
Create and
innovate on data
control strategies
New perimeter
is identity
Identity controls
access
20
Cybersecurity at the New Edge:
Data Control Strategies
Need for data
classification in network
Data Stewards
Data Proliferations
21
22
Cybersecurity When No
One Can Be Trusted:
Key Considerations
Cloud
Proliferation
File Access
Management
Zero Trust
Principle
23
• 2017 Annual Cybercrime Report predicts cybercrimes cost world
$6 trillion annually by 2021, up from $3 trillion in 2015
• 2017 Data Breach Study found that the global average cost of a
data breach is $3.62 million.
• Stopping data breaches using zero trust is more effective than
castle-and-moat process
• Asks who user is and how they accessed environment
• Trust but verify
• Technology: Multifactor authentication, IAM, orchestration,
analytics, encryption, scoring and file system permissions.
• Policies: Give users least amount of access they need to
accomplish a specific task
Cybersecurity When No One Can Be
Trusted: Zero Trust Environments
25
26
Cybersecurity Team Culture:
Key Considerations
Shifting Team And Process Culture
From Policy To Business Enablement
Embedded In Projects
Continuous Improvement
Scientific Approach
27
Understanding the Digital
Transformation
